Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier: +jjil8w+seibt073LkeJor1RrMagz6Z+xt+0QKkAsK4=
Subject key identifier: DB:41:75:DF:9B:62:B3:E7:E9:EE:DD:C7:65:8F:34:56:00:B1:DA:1B
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial: 019D3977DE2AAF1208B872AB42C6B7B24741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number: 093C
Signing time: Sun 29 Mar 2026 12:00:49 +0000
Manifest this update: Sun 29 Mar 2026 12:00:49 +0000
Manifest next update: Mon 30 Mar 2026 12:00:49 +0000
Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: rinQgIIVlLn5yzF+A0bS4W0g6WcPMKEMh9b4oLWo5fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:de:2a:af:12:08:b8:72:ab:42:c6:b7:b2:47:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Validity
Not Before: Mar 29 12:00:49 2026 GMT
Not After : Mar 30 12:00:49 2026 GMT
Subject: CN=db4175df9b62b3e7e9eeddc7658f345600b1da1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:60:b5:3e:21:a4:b3:83:f7:37:3c:ff:9e:
60:47:07:e8:b1:d4:d3:92:1b:4c:e5:96:d8:93:ce:
3d:be:a5:25:c8:84:a7:6c:5f:1e:0d:30:4e:40:ca:
eb:4e:db:91:b1:70:79:f0:38:66:ab:08:ff:2f:96:
58:1a:df:99:d1:d0:5b:b8:aa:dd:50:d9:ee:a3:c1:
6b:f1:50:78:96:de:39:05:b3:b8:fa:e1:3f:48:98:
f8:0c:cc:dc:f8:a8:81:10:98:10:1a:01:be:ba:6f:
4b:fa:35:04:84:4e:77:bb:a6:0e:1e:b9:1d:08:4d:
83:4d:62:e2:cd:5d:1d:c6:52:01:0b:ff:58:6a:58:
85:29:e0:04:53:05:77:67:6a:af:bc:8c:56:5d:e9:
42:2a:84:03:10:1b:b4:7f:33:14:2f:c0:2a:46:a3:
29:67:35:f5:52:52:05:7f:9c:77:de:eb:93:44:0a:
7b:95:03:10:59:27:67:75:ec:a3:66:2d:ce:48:b3:
a7:fc:a0:30:c4:3f:45:4a:b8:01:f1:33:cc:3e:4c:
40:45:41:34:ff:ac:f7:cf:71:7f:82:33:b7:5e:47:
39:dd:b7:9b:53:66:d9:3c:d5:16:65:a7:f0:a5:c4:
d6:08:a4:93:0a:36:ef:6a:79:5d:a5:38:d4:bd:08:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:41:75:DF:9B:62:B3:E7:E9:EE:DD:C7:65:8F:34:56:00:B1:DA:1B
X509v3 Authority Key Identifier:
keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6b:89:be:6e:5a:8c:14:23:e4:79:fb:ab:ac:f1:4e:c7:85:
fc:7a:99:94:46:f5:7e:8a:dd:69:1e:ec:16:b5:fc:3c:4e:ef:
fc:50:f8:35:08:a9:41:95:04:b7:36:ee:cd:1f:45:6a:8d:f8:
ea:ff:67:5b:1d:6a:9f:7c:79:c7:2e:31:88:20:a8:17:b8:b6:
a9:44:63:35:6d:5f:97:02:74:1a:f0:d0:cb:3f:5a:51:cf:27:
bf:04:28:13:42:d3:af:37:b0:e5:00:4b:48:29:3e:89:83:c1:
7e:79:f6:9c:df:87:14:b3:41:19:c7:57:14:83:ef:52:55:74:
d1:09:63:89:9c:e9:2e:4e:01:44:df:15:ae:64:9b:37:0d:50:
f3:10:46:ec:70:26:a0:94:ed:2a:70:02:1d:b0:e9:0b:cc:4d:
99:25:bf:22:dc:a9:74:db:d4:c7:61:3b:90:ec:bb:7f:c5:9f:
81:95:16:f5:eb:1b:a9:30:94:8b:b4:14:b1:c8:c3:fc:b6:14:
81:af:25:50:b6:32:03:66:5c:04:21:6d:83:13:b4:ef:c1:44:
e3:d2:1f:13:47:6d:15:3e:4d:10:68:8c:6f:22:a8:f5:cf:ba:
7d:6d:05:16:ae:99:02:fc:1b:78:a1:f9:f4:27:75:1c:3c:ba:
84:00:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:41 2026 by rpki-client